locked
unauthorized verification.... RRS feed

  • Question


  • I had installed gameguard a little over a week ago, it came with Shaiya a mmorpg. Windows has been buggy since then. I tried deleting game guard in safe mode (as recomended on this site), deleted everyting with the name "game guard" on it (one was in shaiya's folder and the other was an earlier version which didnt seem to effect windows in some other folder, heck, what do I know?). Deleted Shayia before that. Can only run windows in safe mode. Wanting to take a baseball bat to computer. Thanks for your help!


    error code on validation page
    [0x80070426]

    Computer gibberish you asked for:
    Diagnostic Report (1.7.0066.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Online Validation Code: 0x80070426
    Cached Validation Code: N/A, hr = 0x80070426
    Windows Product Key: *****-*****-HMWRX-2H482-HG4X7
    Windows Product Key Hash: 0s+PjAXscz6Q3byqn44nOzUpr4U=
    Windows Product ID: 89572-OEM-7231044-50050
    Windows Product ID Type: 8
    Windows License Type: COA SLP
    Windows OS version: 6.0.6000.2.00010300.0.0.002
    CSVLK Server: N/A
    CSVLK PID: N/A
    ID: {25EE02BA-3A0B-44E3-9A13-4AB574DD5E39}(3)
    Is Admin: Yes
    TestCab: 0x0
    WGA Version: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Vista (TM) Home Basic
    Architecture: 0x00000000
    Build lab: 6000.vista_gdr.071009-1548
    TTS Error: M:20080210135506703-
    Validation Diagnostic:
    Resolution Status: N/A

    Notifications Data-->
    Cached Result: N/A
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-2989-80070002_025D1FF3-282-80041010_025D1FF3-170-80041010_025D1FF3-171-1_025D1FF3-434-80040154_025D1FF3-178-80040154_025D1FF3-179-2_025D1FF3-185-80070002_025D1FF3-199-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: .exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{25EE02BA-3A0B-44E3-9A13-4AB574DD5E39}</UGUID><Version>1.7.0066.0</Version><OS>6.0.6000.2.00010300.0.0.002</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-HG4X7</PKey><PID>89572-OEM-7231044-50050</PID><PIDType>8</PIDType><SID>S-1-5-21-2219548685-1796173588-4289504943</SID><SYSTEM><Manufacturer>Compaq-Presario</Manufacturer><Model>RR790AA-ABA SR2150NX</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>5.14</Version><SMBIOSVersion major="2" minor="4"/><Date>20070411000000.000000+000</Date></BIOS><HWID>88303507018400D6</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>HPQOEM</OEMID><OEMTableID>SLIC-CPC</OEMTableID></OEM><BRT/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Standard Edition 2003</Name><Ver>11</Ver><Val>2FCFB98574B4872</Val><Hash>uv2Wvd1ytLrYPfPr0I7FZClidjg=</Hash><Pid>70141-057-5399002-56434</Pid><PidType>1</PidType></Product></Products></Office></Software></GenuineResults>  

    Spsys.log Content: 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

    Sunday, February 10, 2008 9:14 PM

Answers

  •  

    Hi angelle9511,

     

      Yep, you have an incompatible program installed. It is causing a "In Memory" Mod-Auth temper state in Vista. What this means is that a program is trying to hook or shim into protected files, in memory.

     

      To fix the issue you need to identify the program and uninstall it.

     

    The Bad New:  A Service runs, in Vista, that detects a Mod-Auth Tamper event. But this Service runs randomly, so if you were to run an incompatible program, Vista (most likely) would not immediately detect it and enter a Tamper State and it could take some time for the Tamper to be detected.

     

    The Good New:  You will only see this issue when the incompatible program is Activly Running. I can't stress that enough, so I'll say it again, Only when the incompatible program is running, will Vista enter a tamper state.

     

      Unfortunately, there is no way for me to tell what program is causing the issue. You will need to isolate and identify the program and uninstall it. 

     

      You are correct to suspect GameGuard, since that program has caused this type of issue in the past. The company that developed GameGuard has fixed the program to be compatible with Vista, but since GameGuard is modified to work for each game it comes with, the companies that make the game must release an update that fixes their version of GameGuard. I found a fix for the gameguard issue in a Shaiya forum thread http://forums.aeriagames.com/viewtopic.php?t=60567&sid=2497c104f701b6916427bdd37f628481

     

      The problem is that if you have already uninstalled Shaiya (and rebooted) then GameGuard should not be running. Therefore if you are still seeing the issue, then it is (most likely) not GameGuard, that is causing the problem (you can confirm that GameGuard is running or not by logging into Vista in normal mode and if Vista is in a Mod-Auth tamper state then ctrl + alt + del and bring up the Task Manager. Click on the Processes tab and see if there are any processes that look like they are GameGuard).

     

      If you have confirmed that the issue is not GameGaurd related, then you will need to think back to the time this issue first happened and see if you installed any other programs around that timeframe (this includes Anti-virus software and firewall software).  Uninstall each one untill you find the culprit.  You can also find a list of known incompatible programs here: http://support.microsoft.com/kb/931699/en-us This list is only known programs, I am sure there are others out there, that we have not yet confirmed as incompatible.

     

    Hope this helps,

    Darin Smith

    WGA Forum Manager

    Monday, February 11, 2008 11:47 PM
  • Ok, I finally uninstalled Kaspersky version 7.0. The box said it was Vista home basic and x64 compatible. Well, computer is running fine now. So incase you get anymore of these problems...which I'm sure you will, they are selling these at Office Depot, you will know it has happened before.
    Wednesday, February 13, 2008 1:43 AM
  • Windows OneCare is a superb security solution: http://onecare.live.com/standard/en-ie/default.htm

     

     

    Wednesday, February 13, 2008 2:23 AM
    Moderator

All replies

  •  

    Hi angelle9511,

     

      Yep, you have an incompatible program installed. It is causing a "In Memory" Mod-Auth temper state in Vista. What this means is that a program is trying to hook or shim into protected files, in memory.

     

      To fix the issue you need to identify the program and uninstall it.

     

    The Bad New:  A Service runs, in Vista, that detects a Mod-Auth Tamper event. But this Service runs randomly, so if you were to run an incompatible program, Vista (most likely) would not immediately detect it and enter a Tamper State and it could take some time for the Tamper to be detected.

     

    The Good New:  You will only see this issue when the incompatible program is Activly Running. I can't stress that enough, so I'll say it again, Only when the incompatible program is running, will Vista enter a tamper state.

     

      Unfortunately, there is no way for me to tell what program is causing the issue. You will need to isolate and identify the program and uninstall it. 

     

      You are correct to suspect GameGuard, since that program has caused this type of issue in the past. The company that developed GameGuard has fixed the program to be compatible with Vista, but since GameGuard is modified to work for each game it comes with, the companies that make the game must release an update that fixes their version of GameGuard. I found a fix for the gameguard issue in a Shaiya forum thread http://forums.aeriagames.com/viewtopic.php?t=60567&sid=2497c104f701b6916427bdd37f628481

     

      The problem is that if you have already uninstalled Shaiya (and rebooted) then GameGuard should not be running. Therefore if you are still seeing the issue, then it is (most likely) not GameGuard, that is causing the problem (you can confirm that GameGuard is running or not by logging into Vista in normal mode and if Vista is in a Mod-Auth tamper state then ctrl + alt + del and bring up the Task Manager. Click on the Processes tab and see if there are any processes that look like they are GameGuard).

     

      If you have confirmed that the issue is not GameGaurd related, then you will need to think back to the time this issue first happened and see if you installed any other programs around that timeframe (this includes Anti-virus software and firewall software).  Uninstall each one untill you find the culprit.  You can also find a list of known incompatible programs here: http://support.microsoft.com/kb/931699/en-us This list is only known programs, I am sure there are others out there, that we have not yet confirmed as incompatible.

     

    Hope this helps,

    Darin Smith

    WGA Forum Manager

    Monday, February 11, 2008 11:47 PM
  • Ok, I finally uninstalled Kaspersky version 7.0. The box said it was Vista home basic and x64 compatible. Well, computer is running fine now. So incase you get anymore of these problems...which I'm sure you will, they are selling these at Office Depot, you will know it has happened before.
    Wednesday, February 13, 2008 1:43 AM
  • Windows OneCare is a superb security solution: http://onecare.live.com/standard/en-ie/default.htm

     

     

    Wednesday, February 13, 2008 2:23 AM
    Moderator